123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181 |
- 'use strict';
- var cookie = require('cookie');
- var signature = require('cookie-signature');
- module.exports = cookieParser;
- module.exports.JSONCookie = JSONCookie;
- module.exports.JSONCookies = JSONCookies;
- module.exports.signedCookie = signedCookie;
- module.exports.signedCookies = signedCookies;
- function cookieParser(secret, options) {
- return function cookieParser(req, res, next) {
- if (req.cookies) {
- return next();
- }
- var cookies = req.headers.cookie;
- var secrets = !secret || Array.isArray(secret)
- ? (secret || [])
- : [secret];
- req.secret = secrets[0];
- req.cookies = Object.create(null);
- req.signedCookies = Object.create(null);
-
- if (!cookies) {
- return next();
- }
- req.cookies = cookie.parse(cookies, options);
-
- if (secrets.length !== 0) {
- req.signedCookies = signedCookies(req.cookies, secrets);
- req.signedCookies = JSONCookies(req.signedCookies);
- }
-
- req.cookies = JSONCookies(req.cookies);
- next();
- };
- }
- function JSONCookie(str) {
- if (typeof str !== 'string' || str.substr(0, 2) !== 'j:') {
- return undefined;
- }
- try {
- return JSON.parse(str.slice(2));
- } catch (err) {
- return undefined;
- }
- }
- function JSONCookies(obj) {
- var cookies = Object.keys(obj);
- var key;
- var val;
- for (var i = 0; i < cookies.length; i++) {
- key = cookies[i];
- val = JSONCookie(obj[key]);
- if (val) {
- obj[key] = val;
- }
- }
- return obj;
- }
- function signedCookie(str, secret) {
- if (typeof str !== 'string') {
- return undefined;
- }
- if (str.substr(0, 2) !== 's:') {
- return str;
- }
- var secrets = !secret || Array.isArray(secret)
- ? (secret || [])
- : [secret];
- for (var i = 0; i < secrets.length; i++) {
- var val = signature.unsign(str.slice(2), secrets[i]);
- if (val !== false) {
- return val;
- }
- }
- return false;
- }
- function signedCookies(obj, secret) {
- var cookies = Object.keys(obj);
- var dec;
- var key;
- var ret = Object.create(null);
- var val;
- for (var i = 0; i < cookies.length; i++) {
- key = cookies[i];
- val = obj[key];
- dec = signedCookie(val, secret);
- if (val !== dec) {
- ret[key] = dec;
- delete obj[key];
- }
- }
- return ret;
- }
|